This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft File: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft (raw, json) Hash identifier: aMXugjyD16Ad/rjiKoUB2Bp916Yll99W81nr6yOUSwo= Subject key identifier: 82:CC:19:30:B7:DF:0B:B5:94:96:25:EB:9E:63:29:BA:4D:48:F1:2D Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7 Certificate issuer: /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7 Certificate serial: 019AF2766E294F6453D1E542CBE7A50A67DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft Manifest number: 0FF3 Signing time: Sat 06 Dec 2025 07:00:38 +0000 Manifest this update: Sat 06 Dec 2025 07:00:38 +0000 Manifest next update: Sun 07 Dec 2025 07:00:38 +0000 Files and hashes: 1: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl (hash: 7Wtjs+wx4BtfDY3Y+e7vfJPOwfLe6w25XUciVhPDJcE=) 2: cOp1cqfBELUzDJ5OCVCcFEeZSnw.roa (hash: TeUirEuTA43EYVzOUWEt62Nw9bA/6GjvRc1N3Wwsl64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:6e:29:4f:64:53:d1:e5:42:cb:e7:a5:0a:67:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7 Validity Not Before: Dec 6 07:00:38 2025 GMT Not After : Dec 7 07:00:38 2025 GMT Subject: CN=82cc1930b7df0bb5949625eb9e6329ba4d48f12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:89:ff:67:13:73:56:da:7b:31:54:a8:1d:5a: 96:28:a3:84:41:69:40:26:5f:2b:f3:bd:8c:ef:39: 8a:48:6f:cb:fd:86:2d:32:19:1d:9c:3a:76:7a:7c: 22:ad:06:f4:40:d5:de:05:f2:e8:47:72:50:b0:09: 00:b9:ae:4e:02:89:72:f3:db:07:65:84:be:75:de: 36:4a:96:93:25:58:b6:55:78:b4:da:e3:07:4a:38: df:a4:fe:3e:af:ed:86:1d:ad:ac:06:e8:ee:af:a3: d7:4b:db:e7:90:06:fe:b4:6b:be:a4:a8:af:a6:93: 6b:cd:54:a7:bb:a7:6e:05:31:1f:48:f5:52:56:18: ac:fa:9f:71:19:8a:7c:10:90:04:9c:1a:c4:7e:cc: 19:18:84:56:0a:75:cc:86:cb:bd:3d:69:9e:9f:9a: 73:20:e4:16:91:bd:a8:e5:1a:d7:3d:2c:ea:ac:f9: 15:a0:9b:5d:40:10:1f:78:c3:24:4c:66:43:1f:c1: 74:71:90:a2:01:84:17:3c:ca:13:95:b0:6c:6b:fe: a7:32:b3:63:6b:52:84:3b:3f:63:ea:36:a2:12:1a: 9f:e6:51:c9:dd:8d:38:f6:00:f3:f1:3f:3c:e9:1b: c2:a6:94:76:de:23:c2:5d:6c:f9:a0:10:d4:ef:d8: a2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CC:19:30:B7:DF:0B:B5:94:96:25:EB:9E:63:29:BA:4D:48:F1:2D X509v3 Authority Key Identifier: keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:08:47:d6:1f:cf:64:ed:2b:ff:03:d3:53:e9:41:d0:7e:07: 9f:b4:bf:ed:b8:bf:c0:64:1d:75:ed:a7:96:21:e3:8d:e2:6c: 2d:9a:06:29:39:d2:a2:05:04:31:5c:f2:a0:c3:62:fa:ee:d5: 0f:40:79:80:bd:86:10:62:f8:eb:bd:8e:aa:3b:db:ad:e6:37: 5d:81:27:e7:cd:e1:ba:04:de:5b:ff:83:08:89:02:d0:5f:35: a0:20:53:b3:91:22:33:c3:9c:31:1d:4f:79:7c:4e:64:6f:fc: 69:3a:ff:ec:87:62:e2:51:f9:31:4c:b1:75:03:22:b3:94:71: 35:78:99:28:54:f8:52:73:4f:c3:7b:bb:25:df:36:98:82:ad: 92:db:a5:7e:2a:85:dc:8e:76:7e:53:90:ad:21:71:a1:79:28: 08:e4:31:e8:c8:2e:48:4a:9c:6e:c8:8e:09:b3:93:1f:b1:9f: 97:75:1f:c9:ed:1d:6d:4b:84:d2:26:c5:f5:81:9d:a6:cd:3c: 91:da:0d:4c:e5:55:42:f1:6a:fc:a0:8f:9f:12:f9:25:a8:62: f5:1e:a4:52:b9:a5:37:ff:85:45:e1:6a:45:db:43:09:53:00: 6c:a9:4b:52:61:2c:d1:23:9b:cf:8a:c4:1e:64:ce:53:25:dc: e6:92:8f:28 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrydm4pT2RT0eVCy+elCmfeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNmRmNTNjOWZkMmM1ZmM3NGYxZGI3MTgzNGQ3ZTQ2YTc2 ZTkxZDcwHhcNMjUxMjA2MDcwMDM4WhcNMjUxMjA3MDcwMDM4WjAzMTEwLwYDVQQD Eyg4MmNjMTkzMGI3ZGYwYmI1OTQ5NjI1ZWI5ZTYzMjliYTRkNDhmMTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYn/ZxNzVtp7MVSoHVqWKKOEQWlA Jl8r872M7zmKSG/L/YYtMhkdnDp2enwirQb0QNXeBfLoR3JQsAkAua5OAoly89sH ZYS+dd42SpaTJVi2VXi02uMHSjjfpP4+r+2GHa2sBujur6PXS9vnkAb+tGu+pKiv ppNrzVSnu6duBTEfSPVSVhis+p9xGYp8EJAEnBrEfswZGIRWCnXMhsu9PWmen5pz IOQWkb2o5RrXPSzqrPkVoJtdQBAfeMMkTGZDH8F0cZCiAYQXPMoTlbBsa/6nMrNj a1KEOz9j6jaiEhqf5lHJ3Y049gDz8T886RvCppR23iPCXWz5oBDU79iimwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFILMGTC33wu1lJYl655jKbpNSPEtMB8GA1UdIwQY MBaAFPpt9Tyf0sX8dPHbcYNNfkanbpHXMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tMzFQSl9TeGZ4MDhkdHhnMDEtUnFkdWtkYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvYTk0NzgwLTFiZjMtNDY3YS05MzY5 LWU5OGZmMzNmNjk3Yy8xLzEtbTMxUEpfU3hmeDA4ZHR4ZzAxLVJxZHVrZGMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2UzL2E5NDc4MC0xYmYzLTQ2N2EtOTM2OS1lOThmZjMzZjY5 N2MvMS8xLW0zMVBKX1N4ZngwOGR0eGcwMS1ScWR1a2RjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwhH 1h/PZO0r/wPTU+lB0H4Hn7S/7bi/wGQdde2nliHjjeJsLZoGKTnSogUEMVzyoMNi +u7VD0B5gL2GEGL4672OqjvbreY3XYEn583hugTeW/+DCIkC0F81oCBTs5EiM8Oc MR1PeXxOZG/8aTr/7Idi4lH5MUyxdQMis5RxNXiZKFT4UnNPw3u7Jd82mIKtktul fiqF3I52flOQrSFxoXkoCOQx6MguSEqcbsiOCbOTH7Gfl3Ufye0dbUuE0ibF9YGd ps08kdoNTOVVQvFq/KCPnxL5Jahi9R6kUrmlN/+FReFqRdtDCVMAbKlLUmEs0SOb z4rEHmTOUyXc5pKPKA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:37 2025 by rpki-client